An out-of-bounds write vulnerability (CWE-787) exists in the CustOS Driver component of Samsung Mobile Processor Exynos 1580 firmware. Specifically, requesting oversized shared memory from the custos_iwc device can cause out-of-bounds read and write operations, potentially resulting in memory corruption or information leakage. The CVSS 3.1 base score is 4.2, reflecting a medium severity with local attack vector, high attack complexity, low privileges required, no user interaction, and a scope change. No exploits are known in the wild and no patch or remediation details are provided.

Successful exploitation can cause memory corruption or information leakage on devices running the affected firmware. The attack requires local access with low privileges and has high complexity, limiting the likelihood of widespread exploitation. The impact includes limited confidentiality loss and availability degradation but no integrity impact is indicated.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or workaround information is provided in the available data. Until a fix is available, limit local access to trusted users and monitor for suspicious activity related to the custos_iwc device.